Java Cryptography Extensions: Practical Guide for Programmers
Regular price
12.250 KD
inc. VAT
Couldn't load pickup availability
Table of contents
- Cover
- Contentsvii
- Prefacexi
- Chapter 1. Understanding Java's Cryptographic Architecture1
- 1.1 Java and Cryptography3
- 1.2 Java Cryptography Architecture4
- 1.3 Java Cryptography Extension (JCE)7
- 1.4 Understanding the Service Provider Interface Architecture8
- 1.5 Installing Providers9
- 1.6 JCA Helper Classes13
- 1.7 Working with Jurisdiction Policy Files27
- Chapter 2. Working with Symmetric Ciphers29
- 2.1 Random Number Generation30
- 2.2 The SecureRandom Engine31
- 2.3 The KeyGenerator Engine33
- 2.4 Avoiding Opaque Keys36
- 2.5 Categorizing Symmetric Ciphers40
- 2.6 Padding and Cipher Modes42
- 2.7 The Cipher Engine46
- 2.8 Password Based Encryption59
- 2.9 Bringing Order to Chaos: Picking a Cipher64
- Chapter 3. Working with Asymmetric Ciphers and Key Agreement Protocols67
- 3.1 The KeyPairGenerator Engine69
- 3.2 Revisiting the Cipher Engine78
- 3.3 Comparing Keys for Equality84
- 3.4 Looking to the Future: Elliptic Curve Cryptography84
- 3.5 The KeyAgreement Engine85
- Chapter 4. Message Digests, Message Authentication Codes, and Digital Signatures101
- 4.1 Choosing a Message Digest Algorithm102
- 4.2 The MessageDigest Engine103
- 4.3 The Mac Engine107
- 4.4 Digital Signatures111
- 4.5 The Signature Engine113
- Chapter 5. Managing Keys and Certificates119
- 5.1 The Need for Key Management119
- 5.2 Digital Certificates Defined120
- 5.3 The KeyStore Engine121
- 5.4 The CertificateFactory Engine132
- 5.5 Conclusion150
- Bibliography153
- Index155
For a long time, there has been a need for a practical, down-to-earth developers book for the Java Cryptography Extension. I am very happy to see there is now a book that can answer many of the technical questions that developers, managers, and researchers have about such a critical topic. I am sure that this book will contribute greatly to the success of securing Java applications and deployments for e-business. --Anthony Nadalin, Java Security Lead Architect, IBM
For many Java developers and software engineers, cryptography is an "on-demand" programming exercise, where cryptographic concepts are shelved until the next project requires renewed focus. But considerations for cryptography must be made early on in the design process and it’s imperative that developers know what kinds of solutions exist.
One of Java’s solutions to help bridge the gap between academic research and real-world problem solving comes in the form of a well-defined architecture for implementing cryptographic solutions. However, to use the architecture and its extensions, it is important to recognize the pros and cons of different cryptographic algorithms and to know how to implement various devices like key agreements, digital signatures, and message digests, to name a few.
In Java Cryptography Extensions (JCE), cryptography is discussed at the level that developers need to know to work with the JCE and with their own applications but that doesn’t overwhelm by packing in details unimportant to the busy professional. The JCE is explored using numerous code examples and instructional detail, with clearly presented sections on each aspect of the Java library. An online open-source cryptography toolkit and the code for all of the examples further reinforces the concepts covered within the book. No other resource presents so concisely or effectively the exact material needed to begin utilizing the JCE.
* Written by a seasoned veteran of both cryptography and server-side programming
* Covers the architecture of the JCE, symmetric ciphers, asymmetric ciphers, message digests, message authentication codes, digital signatures, and managing keys and certificates
* Includes a companion web site that contains the code for the examples in the book, open-source cryptographic toolkits, and further resources
For many Java developers and software engineers, cryptography is an "on-demand" programming exercise, where cryptographic concepts are shelved until the next project requires renewed focus. But considerations for cryptography must be made early on in the design process and it’s imperative that developers know what kinds of solutions exist.
One of Java’s solutions to help bridge the gap between academic research and real-world problem solving comes in the form of a well-defined architecture for implementing cryptographic solutions. However, to use the architecture and its extensions, it is important to recognize the pros and cons of different cryptographic algorithms and to know how to implement various devices like key agreements, digital signatures, and message digests, to name a few.
In Java Cryptography Extensions (JCE), cryptography is discussed at the level that developers need to know to work with the JCE and with their own applications but that doesn’t overwhelm by packing in details unimportant to the busy professional. The JCE is explored using numerous code examples and instructional detail, with clearly presented sections on each aspect of the Java library. An online open-source cryptography toolkit and the code for all of the examples further reinforces the concepts covered within the book. No other resource presents so concisely or effectively the exact material needed to begin utilizing the JCE.
* Written by a seasoned veteran of both cryptography and server-side programming
* Covers the architecture of the JCE, symmetric ciphers, asymmetric ciphers, message digests, message authentication codes, digital signatures, and managing keys and certificates
* Includes a companion web site that contains the code for the examples in the book, open-source cryptographic toolkits, and further resources